Malware

Johnnie.329138 removal

Malware Removal

The Johnnie.329138 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Johnnie.329138 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Uses Windows utilities for basic functionality
  • A process attempted to delay the analysis task by a long amount of time.
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Attempts to modify proxy settings

How to determine Johnnie.329138?


File Info:

crc32: 99666C45
md5: c54784a2a5c1b33fd4e29b63d39f7f17
name: C54784A2A5C1B33FD4E29B63D39F7F17.mlw
sha1: 7c3f6f52a08428358ad2b6032f99f28ea87b8cc7
sha256: e1c53b0e0d02d22d90496aa67298086866f78fbe18ee00b17ce4fd1beb0f033c
sha512: a4fc84aea16836943acac845c4ebf1dad9729424ea149cfa503d1f600dc00acbf9652c44a1e4a4d270ff3d952e4470860509e7deab20a4f562dd5d1f128acf1d
ssdeep: 12288:32a/rAA8VjD83Mmzv5ALfcfvMJ4bXD9eQ4q0I2Z45NVsRso9gB2/j2vPTSy4jvt:D0PsvIfc8abX14pW5NDQIPqjpqy0
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 2012 Whenspeech Corporation. All rights reserved
WEB: https://chiefdivide.ru
InternalName: Tool.dll
FileVersion: 3.2.7.937
CompanyName: Whenspeech
ProductName: Whenspeech Eye boy
ProductVersion: 3.2.7.937
FileDescription: Eye boy
OriginalFilename: Tool.dll
Translation: 0x0409 0x04b0

Johnnie.329138 also known as:

CynetMalicious (score: 99)
ALYacGen:Variant.Johnnie.329138
SangforSuspicious.Win32.Babar.26409
AlibabaTrojan:Win32/Kryptik.d39ca1ed
K7GWTrojan ( 0057bb411 )
K7AntiVirusTrojan ( 0057bb411 )
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.HKQP
AvastWin32:Trojan-gen
BitDefenderGen:Variant.Johnnie.329138
MicroWorld-eScanGen:Variant.Johnnie.329138
Ad-AwareGen:Variant.Johnnie.329138
SophosMal/Generic-S
ComodoMalware@#2dsuz8gddyd17
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionRDN/Generic.com
FireEyeGen:Variant.Johnnie.329138
EmsisoftGen:Variant.Johnnie.329138 (B)
WebrootW32.Trojan.Gen
AviraTR/AD.UrsnifDropper.cducx
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Johnnie.D505B2
AegisLabTrojan.Win32.Johnnie.4!c
GDataGen:Variant.Johnnie.329138
McAfeeRDN/Generic.com
MAXmalware (ai score=80)
VBA32BScope.TrojanBanker.Gozi
MalwarebytesTrojan.Ursnif
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002H0CE321
RisingTrojan.Kryptik!8.8 (CLOUD)
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.117454436.susgen
FortinetW32/PossibleThreat
AVGWin32:Trojan-gen

How to remove Johnnie.329138?

Johnnie.329138 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment